Red Hat Ansible vulnerabilities

45 CVEs affecting Red Hat Ansible, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2024-0690, published 2024-02-06.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2016-9587, published 2018-04-24. High severity, CVSS 8.1. EPSS: 17.1% chance of exploitation in the next 30 days. Ansible before versions 2.1.4, 2.2.1 is vulnerable to an improper input validation in Ansible's handling of data sent from client systems. An attacker with control over a client system being managed…
CVE-2014-4678, published 2020-02-20. Critical severity, CVSS 9.8. EPSS: 5.2% chance of exploitation in the next 30 days. The safe_eval function in Ansible before 1.6.4 does not properly restrict the code subset, which allows remote attackers to execute arbitrary code via crafted instructions. NOTE: this vulnerability…
CVE-2014-4657, published 2020-02-20. Critical severity, CVSS 9.8. EPSS: 4.4% chance of exploitation in the next 30 days. The safe_eval function in Ansible before 1.5.4 does not properly restrict the code subset, which allows remote attackers to execute arbitrary code via crafted instructions.
CVE-2017-7550, published 2017-11-21. Critical severity, CVSS 9.8. EPSS: 3.6% chance of exploitation in the next 30 days. A flaw was found in the way Ansible (2.3.x before 2.3.3, and 2.4.x before 2.4.1) passed certain parameters to the jenkins_plugin module. Remote attackers could use this flaw to expose sensitive…
CVE-2014-4967, published 2020-02-18. Critical severity, CVSS 9.8. EPSS: 3.6% chance of exploitation in the next 30 days. Multiple argument injection vulnerabilities in Ansible before 1.6.7 allow remote attackers to execute arbitrary code by leveraging access to an Ansible managed host and providing a crafted fact, as…
CVE-2014-4966, published 2020-02-18. Critical severity, CVSS 9.8. EPSS: 3.6% chance of exploitation in the next 30 days. Ansible before 1.6.7 does not prevent inventory data with "{{" and "lookup" substrings, and does not prevent remote data with "{{" substrings, which allows remote attackers to execute arbitrary code…
CVE-2016-8628, published 2018-07-31. Critical severity, CVSS 9.1. EPSS: 3.2% chance of exploitation in the next 30 days. Ansible before version 2.2.0 fails to properly sanitize fact variables sent from the Ansible controller. An attacker with the ability to create special variables on the controller could execute…
CVE-2017-7466, published 2018-06-22. High severity, CVSS 8.0. EPSS: 3.1% chance of exploitation in the next 30 days. Ansible before version 2.3 has an input validation vulnerability in the handling of data sent from client systems. An attacker with control over a client system being managed by Ansible, and the…
CVE-2014-3498, published 2017-06-08. High severity, CVSS 8.8. EPSS: 2.5% chance of exploitation in the next 30 days. The user module in ansible before 1.6.6 allows remote authenticated users to execute arbitrary commands.
CVE-2018-16876, published 2019-01-03. Medium severity, CVSS 5.3. EPSS: 2.5% chance of exploitation in the next 30 days. ansible before versions 2.5.14, 2.6.11, 2.7.5 is vulnerable to a information disclosure flaw in vvv+ mode with no_log on that can lead to leakage of sensible data.

Latest

CVE-2024-0690, published 2024-02-06. Medium severity, CVSS 5.5. EPSS: 0.3% chance of exploitation in the next 30 days. An information disclosure flaw was found in ansible-core due to a failure to respect the ANSIBLE_NO_LOG configuration in some scenarios. Information is still included in the output in certain tasks,…
CVE-2023-5764, published 2023-12-12. High severity, CVSS 7.8. EPSS: 0.5% chance of exploitation in the next 30 days. A template injection flaw was found in Ansible where a user's controller internal templating operations may remove the unsafe designation from template data. This issue could allow an attacker to use…
CVE-2022-3697, published 2022-10-28. High severity, CVSS 7.5. EPSS: 0.8% chance of exploitation in the next 30 days. A flaw was found in Ansible in the amazon.aws collection when using the tower_callback parameter from the amazon.aws.ec2_instance module. This flaw allows an attacker to take advantage of this issue…
CVE-2021-20180, published 2022-03-16. Medium severity, CVSS 5.5. EPSS: 0.3% chance of exploitation in the next 30 days. A flaw was found in ansible module where credentials are disclosed in the console log by default and not protected by the security feature when using the bitbucket_pipeline_variable module. This flaw…
CVE-2021-20191, published 2021-05-26. Medium severity, CVSS 5.5. EPSS: 0.3% chance of exploitation in the next 30 days. A flaw was found in ansible. Credentials, such as secrets, are being disclosed in console log by default and not protected by no_log feature when using those modules. An attacker can take advantage…
CVE-2021-20178, published 2021-05-26. Medium severity, CVSS 5.5. EPSS: 0.3% chance of exploitation in the next 30 days. A flaw was found in ansible module where credentials are disclosed in the console log by default and not protected by the security feature when using the bitbucket_pipeline_variable module. This flaw…
CVE-2021-3447, published 2021-04-01. Medium severity, CVSS 5.5. EPSS: 0.3% chance of exploitation in the next 30 days. A flaw was found in several ansible modules, where parameters containing credentials, such as secrets, were being logged in plain-text on managed nodes, as well as being made visible on the…
CVE-2020-25635, published 2020-10-05. Medium severity, CVSS 5.5. EPSS: 0.3% chance of exploitation in the next 30 days. A flaw was found in Ansible Base when using the aws_ssm connection plugin as garbage collector is not happening after playbook run is completed. Files would remain in the bucket exposing the data.…
CVE-2020-25636, published 2020-10-05. High severity, CVSS 7.1. EPSS: 0.3% chance of exploitation in the next 30 days. A flaw was found in Ansible Base when using the aws_ssm connection plugin as there is no namespace separation for file transfers. Files are written directly to the root bucket, making possible to…
CVE-2019-14904, published 2020-08-26. High severity, CVSS 7.3. EPSS: 0.4% chance of exploitation in the next 30 days. A flaw was found in the solaris_zone module from the Ansible Community modules. When setting the name for the zone on the Solaris host, the zone name is checked by listing the process with the 'ps'…